Settings
Account security for the admin panel.

Password
Set a new password under Change password — minimum 12 characters. You'll need your current one to change it.
Two-factor (TOTP)
Click Enable, scan the QR code with your authenticator app (or type the secret), and confirm with a 6-digit code. Save the recovery codes somewhere safe — they're your way back in if you lose the authenticator. Disable removes it.
Passkeys
Add a passkey for hardware or biometric sign-in — Touch ID, a YubiKey, or your phone. Click Add passkey, name it, and follow the prompt. Registered passkeys are listed here; remove one any time.